Multiple Vulnerabilities in Microsoft SQL Server 2000 - 01 Aug 2002

Cesar Cerrudo discovered three new vulnerabilities in Microsoft SQL Server 2000 and Microsoft SQL Server Desktop Engine (MSDE) 2000. The vulnerabilities are buffer overruns with a potential for Denial of Service (DoS) attacks. Microsoft has released Security Bulletin MS02- 039 (Buffer Overruns in SQL Server 2000 Resolution Service Could Enable Code Execution) to address this vulnerability and recommends that affected users download and apply the appropriate patch mentioned in the bulletin.

http://www.secadministrator.com/articles/index.cfm?articleid=26075